Courses & Workshops

Have questions about training?     Contact us

DF210 - Building an Investigation with EnCase®

Duration: 4 Days

**Formerly EnCase v7 Computer Forensics II

This hands-on course is designed for investigators with solid computer skills, prior computer forensics training, and experience using EnCase® Forensic (EnCase). This course builds upon the skills covered in the DF120 – Foundations of Digital Forensics course and enhances the examiner's ability to work efficiently through the use of the unique features of EnCase. This course will build an investigation using analysis techniques, such as recovering volumes, registry analysis, and examining compound files. The course progresses through the analysis of Windows artifacts, shortcut link files, Recycle Bin, stored internet data, and email. This course will assist criminal, corporate, and cybersecurity analysts.

Students must understand EnCase forensic concepts, the structure of the evidence file, creating and using case files, and data acquisition and basic analysis methods. It is also important that the students are familiar with the methods for recovering deleted files and folders in a FAT environment, conducting indexed queries and keyword searches across logical and physical media, creating and using EnCase® bookmarks, file signature analysis, and exporting evidence.

Delivery method: Group-Live. NASBA defined level: intermediate.

CPE Credits - 32

Audience

This course is intended for cybersecurity professionals, litigation support, and forensic investigators.

Prerequisites

DF120 – Foundations in Digital Forensics with EnCase®

Participants should have attended the EnCase course, DF120 – Foundations of Digital Forensics or EnCase v7 Computer Forensics I (offered prior to June, 2016).

Summary:

Focusing on commonly conducted investigations, students will learn about the following:

  • How to recover encrypted information particularly that which was encrypted using Windows BitLocker™
  • How to locate and recover deleted partitions
  • Students will learn how to deal with compound file types
  • Students will learn about the Windows® Registry
  • How to determine time zone offsets and properly adjust case settings
  • How to create and use conditions for effective searching
  • Students will learn how to use the EnCase® Evidence Processor
  • Students will gain an overview of the FAT, ExFAT, and NT file system
  • How to conduct keyword searches and advanced searches using GREP
  • The differences between single and logical evidence files and how to create and use of logical evidence files
  • How to identify Windows operating system artifacts, such as link files, Recycle Bin, and user folders
  • How to recover data from the Recycle Bin
  • How to recover artifacts, such as swap files, file slack, and spooler files
  • How to conduct a search for e-mail and e-mail attachments
  • Students will learn how to examine e-mail and Internet artifacts
  • How to identify and recover data relating to the use of removable USB devices

Pricing

Format Currency Price
Per Student at Open Text Site €  2,227.50 
Per Student at Open Text Site GBP  1,952.50 
Per Student at Open Text Site USD  2,750.00 

Taxes: All prices exclude VAT or other taxes where applicable (all currencies).

Extra expenses: Customer site course prices do not include instructor travel expenses, which are billed separately.

Reservations: Please provide a minimum of 3 weeks advance notice when arranging courses at customer sites.

Course & Workshop Calendar

Below is a listing of all the currently available dates and locations for this course and/or workshop from Open Text.

Selection & Registration Process

Before you can register for a course or workshop, you need to select which one you want to attend. To do this, simply click on the "Add to cart" link and it will be added to your shopping cart.

Note: After clicking on the "Add to cart" link, you will be taken to the main course and workshop selection page where all of the courses and workshops you have added to your shopping cart will appear at the top of the page.

Once you have selected all the courses and workshops you want to attend, simply select the "Check-out link and complete the registration form.

Date Course Type Course Name Language Location Price Add
Oct 09, 2018  On-site  DF210 - Building an Inves  English  Virtual Classroom - North America GSI Eastern Time 2,750.00  Add to Cart 
Oct 09, 2018  On-site  DF210 - Building an Inves  English  GSI-Washington, DC 2,750.00  Add to Cart 
Oct 16, 2018  On-site  DF210 - Building an Inves  English  GSI-Reading 1,952.50  Add to Cart 
Oct 23, 2018  On-site  DF210 - Building an Inves  English  Virtual Classroom - North America GSI Pacific Time 2,750.00  Add to Cart 
Oct 23, 2018  On-site  DF210 - Building an Inves  English  GSI-Pasadena 2,750.00  Add to Cart 
Nov 06, 2018  On-site  DF210 - Building an Inves  English  GSI-Reading 1,952.50  Add to Cart 
Dec 04, 2018  On-site  DF210 - Building an Inves  English  Virtual Classroom - North America GSI Eastern Time 2,750.00  Add to Cart 
Dec 04, 2018  On-site  DF210 - Building an Inves  English  GSI-Washington, DC 2,750.00  Add to Cart 
Jan 15, 2019  On-site  DF210 - Building an Inves  English  GSI-Pasadena 2,750.00  Add to Cart 
Jan 15, 2019  On-site  DF210 - Building an Inves  English  Virtual Classroom - North America GSI Pacific Time 2,750.00  Add to Cart 
Jan 15, 2019  On-site  DF210 - Building an Inves  English  Virtual Classroom - Europe GSI UK Time 1,952.50  Add to Cart 
Jan 15, 2019  On-site  DF210 - Building an Inves  English  GSI-Reading 1,952.50  Add to Cart 
Feb 12, 2019  On-site  DF210 - Building an Inves  English  GSI-Washington, DC 2,750.00  Add to Cart 
Feb 12, 2019  On-site  DF210 - Building an Inves  English  Virtual Classroom - North America GSI Eastern Time 2,750.00  Add to Cart 
Mar 12, 2019  On-site  DF210 - Building an Inves  English  GSI-Pasadena 2,750.00  Add to Cart 
Mar 12, 2019  On-site  DF210 - Building an Inves  English  Virtual Classroom - Europe GSI UK Time 1,952.50  Add to Cart 
Apr 02, 2019  On-site  DF210 - Building an Inves  English  GSI-Washington, DC 2,750.00  Add to Cart 
Apr 02, 2019  On-site  DF210 - Building an Inves  English  Virtual Classroom - North America GSI Eastern Time 2,750.00  Add to Cart 
May 14, 2019  On-site  DF210 - Building an Inves  English  GSI-Pasadena 2,750.00  Add to Cart 
May 14, 2019  On-site  DF210 - Building an Inves  English  Virtual Classroom - North America GSI Pacific Time 2,750.00  Add to Cart 
Jun 04, 2019  On-site  DF210 - Building an Inves  English  GSI-Reading 1,952.50  Add to Cart 
Jun 18, 2019  On-site  DF210 - Building an Inves  English  GSI-Washington, DC 2,750.00  Add to Cart